@curviate/sdk 0.17.0 → 0.18.1

package/CHANGELOG.md

@@ -9,6 +9,28 @@ Versioning: semantic — minor for additive changes, patch for bug fixes; no sta
 
 ## [Unreleased]
 
+## [0.18.1] — 2026-07-18
+
+### Changed
+
+- **`companies.sendMessage(identifier, chatId, body)`** now takes the normal `2-…`
+  chat id that `companies.chats()` / `chat()` / `searchChats()` return; the endpoint
+  resolves the page mailbox internally from `identifier`. The previous send-ready
+  `COMPANY_` chat-id requirement is gone: pass the id straight from the company chat
+  reads. Method signature and response shape are unchanged (documentation/behavior
+  only).
+
+## [0.18.0] — 2026-07-17
+
+### Added
+
+- **`companies.sendMessage(identifier, chatId, body)`**: reply to a company-inbox
+  conversation as the page. `POST /v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages`.
+  `chatId` must be the send-ready `COMPANY_` chat id from `inboxes.listChats()`, not the
+  `2-…` id `companies.chats()`/`chat()`/`searchChats()` return; a non-`COMPANY_` id is
+  rejected with a guiding 400. Reply-only. The response echoes `sent_as`, the acting
+  identity actually used.
+
 ## [0.17.0] — 2026-07-17
 
 ### Added

package/dist/index.d.ts

@@ -541,7 +541,11 @@ interface paths {
          */
         get: operations["getV1AccountIdCompaniesIdentifierChatsChatIdMessages"];
         put?: never;
-        post?: never;
+        /**
+         * Reply as the company page
+         * @description Sends a message into an existing company-inbox conversation, as the page. chat_id must be the send-ready COMPANY_ form from GET /v1/{account_id}/inboxes/{inbox_id}/chats (the 2-… id from this group's chat reads is not send-ready and returns a guiding 400). The connected account must administer the page. Reply-only: a page can never start a new conversation, only answer an existing one. Send application/json with text, base64 attachments (max 5 MiB per file), or both; at least one of text or attachments is required. Message content passes through to the platform and is never stored. The response's sent_as field names the acting identity that was actually used.
+         */
+        post: operations["postV1AccountIdCompaniesIdentifierChatsChatIdMessages"];
         delete?: never;
         options?: never;
         head?: never;
@@ -6451,6 +6455,184 @@ interface operations {
             };
         };
     };
+    postV1AccountIdCompaniesIdentifierChatsChatIdMessages: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The connected LinkedIn account, which must administer the page. */
+                account_id: string;
+                /** @description The company's numeric id (e.g. 112013061) — the id field of GET /v1/{account_id}/companies/{identifier} or a POST /v1/{account_id}/search/companies result. A public handle or URN is not accepted here — pass the numeric id. */
+                identifier: string;
+                /** @description The COMPANY_ chat id to reply to (e.g. 'COMPANY_83734124_2-…'), from GET /v1/{account_id}/inboxes/{inbox_id}/chats, not the 2-… id from this group's chat reads (that form is rejected with a guiding 400). */
+                chat_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Message text (1–8000 chars). Optional when at least one attachment is supplied. */
+                    text?: string;
+                    /** @description Optional message ID to quote or reply to. */
+                    quote_id?: string;
+                    /** @description Optional file attachments (base64-encoded). */
+                    attachments?: {
+                        /** @description Base64-encoded file bytes. */
+                        content: string;
+                        /** @description Attachment MIME type (e.g. image/png, application/pdf). */
+                        content_type: string;
+                        /** @description File name for the attachment. */
+                        filename: string;
+                    }[];
+                };
+            };
+        };
+        responses: {
+            /** @description Message sent as the page. Returns the new message_id and sent_as, the acting identity, always kind:'company' on this endpoint. company_id is null when the page could not be correlated to a managed page on Curviate, even though the page itself and its name are still known. */
+            201: {
+                headers: {
+                    "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                    RateLimit: components["headers"]["RateLimit"];
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Response type discriminator.
+                         * @enum {string}
+                         */
+                        object?: "message_sent";
+                        /** @description The sent message's identifier. */
+                        message_id?: string;
+                        /** @description The identity this message was actually sent as. */
+                        sent_as?: {
+                            /**
+                             * @description Which identity sent the message.
+                             * @enum {string}
+                             */
+                            kind?: "personal" | "company";
+                            /** @description Company inboxes only. Null when this page is not one of the account's managed companies on Curviate, even though the page itself, and its name, are still known. */
+                            company_id?: string | null;
+                            /** @description Company inboxes only. The page's display name, or null in the rare case the page itself could not be resolved at all. */
+                            name?: string | null;
+                        };
+                    };
+                };
+            };
+            /** @description Empty body or neither text nor attachment supplied, a non-numeric identifier, or chat_id is not the send-ready COMPANY_ form (the guiding error names the required form and its /inboxes source). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Missing or invalid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account does not administer this page (the substrate's own admin gate), the COMPANY_ chat's mailbox correlates to a DIFFERENT company than {identifier}, or the account lacks the required Core seat. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account_id does not belong to this tenant. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Payload too large, an attachment exceeds 5 MiB or the total body exceeds 8 MiB. */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Unsupported media type, the request must use application/json. */
+            415: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account is restricted and cannot be queried. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Rate limited, slow down and retry after the hinted delay. */
+            429: {
+                headers: {
+                    "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                    RateLimit: components["headers"]["RateLimit"];
+                    "Retry-After": components["headers"]["Retry-After"];
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Internal error. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description A temporary error occurred. Please try again. */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Service unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Gateway timeout. */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getV1AccountIdCompaniesIdentifierChatsChatIdMessagesMessageId: {
         parameters: {
             query?: never;
@@ -28499,7 +28681,7 @@ declare class JobsResource {
 }
 
 /**
- * Companies resource — 13 methods.
+ * Companies resource — 14 methods.
  *
  * Account-scoped: the bound context injects `account_id` as the leading
  * `/v1/` path segment on every request (account-first grammar) — the 0.14.1
@@ -28525,6 +28707,12 @@ declare class JobsResource {
  * **Beta:** single-page listing and termination are verified; deep pagination
  * (many pages / large cursor round-trips) is still being validated against a
  * busier inbox.
+ *
+ * `sendMessage()` is the inbox's one write: reply to an existing
+ * conversation AS THE PAGE. It takes the same `2-…` chat id that
+ * `chats()` / `searchChats()` return; the endpoint resolves the page
+ * mailbox internally from `identifier`. Reply-only, same admin
+ * requirement as the reads.
  */
 
 type CompanyProfile = paths["/v1/{account_id}/companies/{identifier}"]["get"]["responses"]["200"]["content"]["application/json"];
@@ -28550,6 +28738,8 @@ type CompanyChatMessageListQuery = NonNullable<paths["/v1/{account_id}/companies
 type CompanyChatMessage = paths["/v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages/{message_id}"]["get"]["responses"]["200"]["content"]["application/json"];
 type CompanyChatSearchPage = paths["/v1/{account_id}/companies/{identifier}/chats/search"]["get"]["responses"]["200"]["content"]["application/json"];
 type CompanyChatSearchQuery = NonNullable<paths["/v1/{account_id}/companies/{identifier}/chats/search"]["get"]["parameters"]["query"]>;
+type CompanySendMessageBody = paths["/v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages"]["post"]["requestBody"]["content"]["application/json"];
+type CompanySendMessageResult = paths["/v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages"]["post"]["responses"]["201"]["content"]["application/json"];
 declare class CompaniesResource {
     protected readonly ctx: RequestContext;
     constructor(ctx: RequestContext);
@@ -28673,6 +28863,37 @@ declare class CompaniesResource {
      * administer the page. Beta — see `chats()`.
      */
     searchChats(identifier: string, params?: CompanyChatSearchQuery): Promise<CompanyChatSearchPage>;
+    /**
+     * Reply to a company-inbox conversation, AS THE PAGE.
+     * `POST /v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages`
+     *
+     * `chatId` is the `2-…` conversation id that `chats()` / `chat()` /
+     * `searchChats()` return for this page. The endpoint resolves the page
+     * mailbox internally from `identifier`, so no special send-ready id is
+     * needed: pass the id straight from the company chat reads.
+     *
+     * Reply-only: this method can only answer an existing conversation, it
+     * cannot start a new one on the page's behalf. The connected account
+     * must administer the page (`managed()`). `attachments[]`, when
+     * supplied, carry base64-encoded file bytes, always sent as JSON, never
+     * multipart. At least one of `text`/`attachments` is required (enforced
+     * server-side). Message content passes through verbatim and is never
+     * stored.
+     *
+     * The response echoes `sent_as`, the acting identity actually used:
+     * `{ kind: "company", company_id, name }` (`company_id` is `null` when
+     * the page could not be correlated to a managed page on Curviate).
+     *
+     * @example
+     * const acc = curviate.account("acc_YOUR_ACCOUNT_ID");
+     * const { items: chats } = await acc.companies.chats("112013061");
+     *
+     * const result = await acc.companies.sendMessage("112013061", chats[0]!.id, {
+     *   text: "Thanks for reaching out, happy to help!",
+     * });
+     * console.log(result.sent_as); // { kind: "company", company_id: "112013061", name: "RedHire" }
+     */
+    sendMessage(identifier: string, chatId: string, body: CompanySendMessageBody): Promise<CompanySendMessageResult>;
 }
 
 /**

package/dist/index.js

@@ -2371,6 +2371,43 @@ var CompaniesResource = class {
       ...params ? { query: params } : {}
     });
   }
+  /**
+   * Reply to a company-inbox conversation, AS THE PAGE.
+   * `POST /v1/{account_id}/companies/{identifier}/chats/{chat_id}/messages`
+   *
+   * `chatId` is the `2-…` conversation id that `chats()` / `chat()` /
+   * `searchChats()` return for this page. The endpoint resolves the page
+   * mailbox internally from `identifier`, so no special send-ready id is
+   * needed: pass the id straight from the company chat reads.
+   *
+   * Reply-only: this method can only answer an existing conversation, it
+   * cannot start a new one on the page's behalf. The connected account
+   * must administer the page (`managed()`). `attachments[]`, when
+   * supplied, carry base64-encoded file bytes, always sent as JSON, never
+   * multipart. At least one of `text`/`attachments` is required (enforced
+   * server-side). Message content passes through verbatim and is never
+   * stored.
+   *
+   * The response echoes `sent_as`, the acting identity actually used:
+   * `{ kind: "company", company_id, name }` (`company_id` is `null` when
+   * the page could not be correlated to a managed page on Curviate).
+   *
+   * @example
+   * const acc = curviate.account("acc_YOUR_ACCOUNT_ID");
+   * const { items: chats } = await acc.companies.chats("112013061");
+   *
+   * const result = await acc.companies.sendMessage("112013061", chats[0]!.id, {
+   *   text: "Thanks for reaching out, happy to help!",
+   * });
+   * console.log(result.sent_as); // { kind: "company", company_id: "112013061", name: "RedHire" }
+   */
+  sendMessage(identifier, chatId, body) {
+    return this.ctx.request({
+      method: "POST",
+      path: `/v1/{account_id}/companies/${identifier}/chats/${chatId}/messages`,
+      body
+    });
+  }
 };
 
 // src/resources/webhooks.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curviate/sdk",
-  "version": "0.17.0",
+  "version": "0.18.1",
   "private": false,
   "description": "TypeScript SDK for the Curviate API.",
   "license": "MIT",

package/src/generated/types.ts

@@ -443,7 +443,11 @@ export interface paths {
          */
         get: operations["getV1AccountIdCompaniesIdentifierChatsChatIdMessages"];
         put?: never;
-        post?: never;
+        /**
+         * Reply as the company page
+         * @description Sends a message into an existing company-inbox conversation, as the page. chat_id must be the send-ready COMPANY_ form from GET /v1/{account_id}/inboxes/{inbox_id}/chats (the 2-… id from this group's chat reads is not send-ready and returns a guiding 400). The connected account must administer the page. Reply-only: a page can never start a new conversation, only answer an existing one. Send application/json with text, base64 attachments (max 5 MiB per file), or both; at least one of text or attachments is required. Message content passes through to the platform and is never stored. The response's sent_as field names the acting identity that was actually used.
+         */
+        post: operations["postV1AccountIdCompaniesIdentifierChatsChatIdMessages"];
         delete?: never;
         options?: never;
         head?: never;
@@ -6355,6 +6359,184 @@ export interface operations {
             };
         };
     };
+    postV1AccountIdCompaniesIdentifierChatsChatIdMessages: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The connected LinkedIn account, which must administer the page. */
+                account_id: string;
+                /** @description The company's numeric id (e.g. 112013061) — the id field of GET /v1/{account_id}/companies/{identifier} or a POST /v1/{account_id}/search/companies result. A public handle or URN is not accepted here — pass the numeric id. */
+                identifier: string;
+                /** @description The COMPANY_ chat id to reply to (e.g. 'COMPANY_83734124_2-…'), from GET /v1/{account_id}/inboxes/{inbox_id}/chats, not the 2-… id from this group's chat reads (that form is rejected with a guiding 400). */
+                chat_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Message text (1–8000 chars). Optional when at least one attachment is supplied. */
+                    text?: string;
+                    /** @description Optional message ID to quote or reply to. */
+                    quote_id?: string;
+                    /** @description Optional file attachments (base64-encoded). */
+                    attachments?: {
+                        /** @description Base64-encoded file bytes. */
+                        content: string;
+                        /** @description Attachment MIME type (e.g. image/png, application/pdf). */
+                        content_type: string;
+                        /** @description File name for the attachment. */
+                        filename: string;
+                    }[];
+                };
+            };
+        };
+        responses: {
+            /** @description Message sent as the page. Returns the new message_id and sent_as, the acting identity, always kind:'company' on this endpoint. company_id is null when the page could not be correlated to a managed page on Curviate, even though the page itself and its name are still known. */
+            201: {
+                headers: {
+                    "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                    RateLimit: components["headers"]["RateLimit"];
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Response type discriminator.
+                         * @enum {string}
+                         */
+                        object?: "message_sent";
+                        /** @description The sent message's identifier. */
+                        message_id?: string;
+                        /** @description The identity this message was actually sent as. */
+                        sent_as?: {
+                            /**
+                             * @description Which identity sent the message.
+                             * @enum {string}
+                             */
+                            kind?: "personal" | "company";
+                            /** @description Company inboxes only. Null when this page is not one of the account's managed companies on Curviate, even though the page itself, and its name, are still known. */
+                            company_id?: string | null;
+                            /** @description Company inboxes only. The page's display name, or null in the rare case the page itself could not be resolved at all. */
+                            name?: string | null;
+                        };
+                    };
+                };
+            };
+            /** @description Empty body or neither text nor attachment supplied, a non-numeric identifier, or chat_id is not the send-ready COMPANY_ form (the guiding error names the required form and its /inboxes source). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Missing or invalid API key. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account does not administer this page (the substrate's own admin gate), the COMPANY_ chat's mailbox correlates to a DIFFERENT company than {identifier}, or the account lacks the required Core seat. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account_id does not belong to this tenant. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Payload too large, an attachment exceeds 5 MiB or the total body exceeds 8 MiB. */
+            413: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Unsupported media type, the request must use application/json. */
+            415: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description The account is restricted and cannot be queried. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Rate limited, slow down and retry after the hinted delay. */
+            429: {
+                headers: {
+                    "RateLimit-Policy": components["headers"]["RateLimit-Policy"];
+                    RateLimit: components["headers"]["RateLimit"];
+                    "Retry-After": components["headers"]["Retry-After"];
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Internal error. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description A temporary error occurred. Please try again. */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Service unavailable. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Gateway timeout. */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getV1AccountIdCompaniesIdentifierChatsChatIdMessagesMessageId: {
         parameters: {
             query?: never;